Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa
File:                     3130332e38302e38302e302f32322d3232203d3e203634333030.roa (raw, json)
Hash identifier:          8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=
Subject key identifier:   60:82:98:5C:62:D1:49:D6:24:D5:B5:0F:6B:68:7E:2B:DC:72:7A:57
Certificate issuer:       /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
Certificate serial:       4C1202A6E0D4612CDDACD42C6A7D2B1C3CB49BEF
Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa
Signing time:             Mon 21 Jul 2025 05:00:00 +0000
ROA not before:           Mon 21 Jul 2025 04:55:00 +0000
ROA not after:            Mon 20 Jul 2026 05:00:00 +0000
asID:                     64300
IP address blocks:        103.80.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl
                          rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:12:02:a6:e0:d4:61:2c:dd:ac:d4:2c:6a:7d:2b:1c:3c:b4:9b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
        Validity
            Not Before: Jul 21 04:55:00 2025 GMT
            Not After : Jul 20 05:00:00 2026 GMT
        Subject: CN=6082985C62D149D624D5B50F6B687E2BDC727A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:de:6d:c7:78:21:75:e4:fb:8f:77:f4:64:e6:
                    c9:11:78:a1:5b:32:0d:90:15:65:0c:08:e8:41:8f:
                    cc:cd:ad:73:71:d5:74:00:e8:67:83:65:ea:03:5f:
                    13:4e:fa:76:22:5a:6f:79:c4:aa:5f:27:d1:c8:4b:
                    9c:cd:1a:98:bf:40:32:f8:1f:82:45:42:31:80:44:
                    f3:6e:47:52:e1:e9:1c:55:dc:53:e4:38:b4:89:e2:
                    9c:16:0b:d0:83:a9:74:04:1e:95:e2:4a:cb:f8:bc:
                    5a:a3:e1:f7:c9:28:b4:ac:0d:46:9a:ed:2a:22:7c:
                    2b:af:62:1b:48:93:59:a3:de:4a:71:4a:c3:a3:ab:
                    db:a7:ba:95:01:4e:fa:c7:89:26:6b:5e:dd:38:1e:
                    83:bf:a3:49:be:ea:b0:57:6c:ea:a6:81:c3:95:3b:
                    63:54:e1:5a:4a:cc:b2:6d:75:01:3b:98:5b:56:1e:
                    e9:a5:9a:e8:2d:b8:a0:7e:b0:ae:d8:dc:3b:de:7e:
                    e6:74:dc:a6:95:af:b1:27:1a:51:be:be:6d:30:57:
                    ae:d8:41:4e:d7:ca:dc:f3:4a:14:70:10:01:55:ca:
                    c6:09:64:7e:dc:cc:ab:e7:54:0d:a3:b3:02:66:e4:
                    c7:44:37:f9:72:d8:ce:ea:98:e9:d4:7e:e7:06:1d:
                    0e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:82:98:5C:62:D1:49:D6:24:D5:B5:0F:6B:68:7E:2B:DC:72:7A:57
            X509v3 Authority Key Identifier:
                keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:62:b8:df:ee:d7:2e:1f:59:a9:3a:92:17:15:7b:9a:7e:
         7a:40:a7:01:db:ec:15:33:9d:97:b8:3d:df:41:c1:e9:ea:ad:
         cc:d3:62:fd:09:2f:98:54:fc:b9:d2:89:e9:99:f5:03:9e:b7:
         7f:35:9a:72:97:59:00:87:69:df:ab:85:83:4c:40:f3:75:c0:
         06:90:50:2b:cb:56:79:89:1f:5c:b7:26:e3:73:a1:17:39:20:
         d5:88:b5:c7:76:02:5c:ee:93:93:7d:f8:87:d8:a7:1f:a9:72:
         b8:92:90:32:eb:d9:79:95:69:5a:62:a6:9d:ce:f6:e7:d2:9b:
         65:59:32:ce:37:37:8b:13:81:b7:67:af:03:8c:0c:c5:8d:68:
         56:66:11:25:b1:f4:93:3a:3a:1d:ca:fc:62:3a:df:60:b8:2a:
         97:b0:83:93:29:11:2e:a5:83:a8:91:c6:d8:da:21:9f:33:ab:
         01:23:88:e3:7f:ed:49:3e:18:6f:4e:0a:3e:2e:56:81:c7:91:
         7f:c2:93:ed:ef:7b:29:8e:1e:c8:51:9b:f5:bd:23:6d:ba:ac:
         b2:81:55:02:7d:4f:1b:95:e4:67:7e:fc:66:f1:85:31:dc:22:
         72:b7:23:fc:0e:0a:03:e0:2b:67:96:ea:9b:8e:e2:d4:4b:78:
         7e:e4:f7:f2
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUTBICpuDUYSzdrNQsan0rHDy0m+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF
QzYzNzBCQzAeFw0yNTA3MjEwNDU1MDBaFw0yNjA3MjAwNTAwMDBaMDMxMTAvBgNV
BAMTKDYwODI5ODVDNjJEMTQ5RDYyNEQ1QjUwRjZCNjg3RTJCREM3MjdBNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt3m3HeCF15PuPd/Rk5skReKFb
Mg2QFWUMCOhBj8zNrXNx1XQA6GeDZeoDXxNO+nYiWm95xKpfJ9HIS5zNGpi/QDL4
H4JFQjGARPNuR1Lh6RxV3FPkOLSJ4pwWC9CDqXQEHpXiSsv4vFqj4ffJKLSsDUaa
7SoifCuvYhtIk1mj3kpxSsOjq9unupUBTvrHiSZrXt04HoO/o0m+6rBXbOqmgcOV
O2NU4VpKzLJtdQE7mFtWHumlmugtuKB+sK7Y3DvefuZ03KaVr7EnGlG+vm0wV67Y
QU7XytzzShRwEAFVysYJZH7czKvnVA2jswJm5MdEN/ly2M7qmOnUfucGHQ6NAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUYIKYXGLRSdYk1bUPa2h+K9xyelcwHwYDVR0j
BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC
OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz
NzBCQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU4NmQzNjM3LTkyYjQtNGFjNy1h
NzViLTk5Y2IwYjA1NjViMC8wLzMxMzAzMzJlMzgzMDJlMzgzMDJlMzAyZjMyMzIy
ZDMyMzIyMDNkM2UyMDM2MzQzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnUFAwDQYJKoZIhvcN
AQELBQADggEBABnLYrjf7tcuH1mpOpIXFXuafnpApwHb7BUznZe4Pd9BwenqrczT
Yv0JL5hU/LnSiemZ9QOet381mnKXWQCHad+rhYNMQPN1wAaQUCvLVnmJH1y3JuNz
oRc5INWItcd2Alzuk5N9+IfYpx+pcriSkDLr2XmVaVpipp3O9ufSm2VZMs43N4sT
gbdnrwOMDMWNaFZmESWx9JM6Oh3K/GI632C4Kpewg5MpES6lg6iRxtjaIZ8zqwEj
iON/7Uk+GG9OCj4uVoHHkX/Ck+3veymOHshRm/W9I226rLKBVQJ9TxuV5Gd+/Gbx
hTHcInK3I/wOCgPgK2eW6puO4tRLeH7k9/I=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:03:13 2025 by rpki-client